Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a9d4c87-e208-4010-a5c6-e2c265094a0b.roa
File:                     0a9d4c87-e208-4010-a5c6-e2c265094a0b.roa (raw, json)
Hash identifier:          MBkKygGKWKcWYJsL/SQ2uqxSNNYn7r9WtZhL0YgN4vA=
Subject key identifier:   47:34:08:6F:24:7E:4C:F7:72:F5:03:DA:07:86:35:D3:FE:B9:6B:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E84F1C4CFF37000FF9282B0B617895CF3B71370
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a9d4c87-e208-4010-a5c6-e2c265094a0b.roa
Signing time:             Fri 10 Oct 2025 00:12:46 +0000
ROA not before:           Fri 10 Oct 2025 00:12:46 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff4:8000::/39 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:84:f1:c4:cf:f3:70:00:ff:92:82:b0:b6:17:89:5c:f3:b7:13:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 10 00:12:46 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=e784f9f4850bcaea0f22223cb849b2d5889925b6ed13112a1781ce9c3b844b7c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:43:75:29:08:ac:f2:b0:48:db:5f:6d:f2:
                    d0:13:4a:e3:97:2e:78:93:55:b1:a8:74:2e:d6:b7:
                    26:54:64:5a:4c:f1:35:15:5d:84:cc:3a:31:db:02:
                    cc:2f:1c:56:b5:67:8a:7b:cc:41:0d:da:20:ef:d4:
                    48:2f:03:9d:d0:58:ee:cf:ad:ed:85:29:f7:a5:bd:
                    63:6a:dd:5d:d5:ea:a4:b2:7a:c6:74:07:46:13:37:
                    88:88:fb:8d:67:de:d9:68:da:27:0d:20:c0:c1:35:
                    44:93:db:60:d2:d6:ab:d6:5d:92:5b:9a:80:1b:7e:
                    0f:05:09:57:c9:fc:ca:3c:10:3e:2e:13:5f:0b:3d:
                    9d:e3:44:6e:22:b9:b3:31:f5:61:9a:39:91:6b:a3:
                    a8:f7:95:92:d9:de:29:18:b6:63:92:1f:65:e1:cf:
                    cc:67:83:44:7b:ec:66:72:61:72:75:b4:c4:a0:19:
                    a8:7e:5f:44:53:7b:d7:40:b1:d9:74:c2:b9:91:66:
                    9a:0a:51:25:e8:db:bd:ce:c3:3a:a7:58:2a:aa:40:
                    24:12:23:fa:e5:13:b8:e2:4c:f4:17:3b:e9:5c:43:
                    18:18:cf:92:db:08:74:0f:3d:19:1b:32:81:9c:f4:
                    b8:89:5a:1f:0c:b8:62:a8:7d:ce:5f:c4:6c:18:5d:
                    a6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:34:08:6F:24:7E:4C:F7:72:F5:03:DA:07:86:35:D3:FE:B9:6B:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a9d4c87-e208-4010-a5c6-e2c265094a0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff4:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         32:66:c9:af:2c:3d:7a:10:59:2c:03:19:1c:37:e3:e5:fb:f5:
         4b:70:07:ee:c4:81:5c:c4:9b:78:ff:c4:22:82:fa:15:47:96:
         26:91:d5:6c:89:db:0e:83:5f:c9:e6:96:27:3a:29:32:44:51:
         7b:61:5b:aa:10:7f:39:97:dc:8e:09:e2:dd:89:50:3c:fc:22:
         63:8e:41:08:84:f5:b7:55:62:21:08:4f:ef:ec:fa:ef:90:8c:
         a0:6a:ce:9b:4b:6f:d4:03:01:fc:49:6a:87:cd:16:2a:c7:e5:
         cd:53:30:49:3b:97:21:13:37:b0:72:69:e8:2f:48:b4:61:90:
         5e:1c:e6:49:80:12:01:7a:fd:e1:c0:27:02:e4:5e:ca:45:a3:
         71:dc:f4:ef:ff:f2:97:29:e8:7d:e2:b9:4a:5f:04:3a:7a:90:
         e8:48:5c:68:a1:d9:73:47:5b:f1:30:46:30:4b:51:55:4c:fe:
         98:31:e9:1d:69:28:e1:93:b9:4c:ab:f4:e7:0b:56:32:f7:c7:
         77:b6:df:43:27:e7:92:db:c7:17:5c:dd:4f:f1:89:c9:66:4e:
         8f:57:08:57:c2:d1:02:27:78:e4:83:f8:25:5c:f3:24:1f:12:
         c4:34:58:63:ed:25:ee:59:15:b1:7f:53:15:35:33:9e:bd:24:
         48:3a:21:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----